diff --git a/CVE-2025-7783-Fix-Switch-to-using-crypto-random-for-boundary-values.patch b/CVE-2025-7783-Fix-Switch-to-using-crypto-random-for-boundary-values.patch deleted file mode 100644 index ac7ff206069b52da32b98e4cfb6251e030e6a69c..0000000000000000000000000000000000000000 --- a/CVE-2025-7783-Fix-Switch-to-using-crypto-random-for-boundary-values.patch +++ /dev/null @@ -1,39 +0,0 @@ -From 534bb5bf53ae6da4cbd707a4c0b015e7e87c18e7 Mon Sep 17 00:00:00 2001 -From: Ben Shonaldmann -Date: Fri Feb 21 21:20:43 2025 -0500 -Subject: [PATCH] CVE-2025-7783 Fix Switch to using crypto random for boundary - values - ---- - lib/form_data.js | 8 ++------ - 1 file changed, 2 insertions(+), 6 deletions(-) - -diff --git a/lib/form_data.js b/lib/form_data.js -index 5b33f55..2df1f31 100644 ---- a/lib/form_data.js -+++ b/lib/form_data.js -@@ -7,6 +7,7 @@ var parseUrl = require('url').parse; - var fs = require('fs'); - var mime = require('mime-types'); - var async = require('async'); -+var crypto = require('crypto'); - - module.exports = FormData; - function FormData() { -@@ -217,12 +218,7 @@ FormData.prototype.getBoundary = function() { - FormData.prototype._generateBoundary = function() { - // This generates a 50 character boundary similar to those used by Firefox. - // They are optimized for boyer-moore parsing. -- var boundary = '--------------------------'; -- for (var i = 0; i < 24; i++) { -- boundary += Math.floor(Math.random() * 10).toString(16); -- } -- -- this._boundary = boundary; -+ this._boundary = '--------------------------' + crypto.randomBytes(12).toString('hex'); - }; - - // Note: getLengthSync DOESN'T calculate streams length --- -2.43.0 - diff --git a/README.en.md b/README.en.md deleted file mode 100644 index eb88a501a5965abe42100029f8c6a6d2437fa887..0000000000000000000000000000000000000000 --- a/README.en.md +++ /dev/null @@ -1,36 +0,0 @@ -# nodejs-form-data - -#### Description -A module to create readable "multipart/form-data" streams - -#### Software Architecture -Software architecture description - -#### Installation - -1. xxxx -2. xxxx -3. xxxx - -#### Instructions - -1. xxxx -2. xxxx -3. xxxx - -#### Contribution - -1. Fork the repository -2. Create Feat_xxx branch -3. Commit your code -4. Create Pull Request - - -#### Gitee Feature - -1. You can use Readme\_XXX.md to support different languages, such as Readme\_en.md, Readme\_zh.md -2. Gitee blog [blog.gitee.com](https://blog.gitee.com) -3. Explore open source project [https://gitee.com/explore](https://gitee.com/explore) -4. The most valuable open source project [GVP](https://gitee.com/gvp) -5. The manual of Gitee [https://gitee.com/help](https://gitee.com/help) -6. The most popular members [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/) diff --git a/README.md b/README.md index fb2b9452b1d95d6f1c49450d3f30182de85167b6..1bf67687a47a1081d2229666ba42c09b6b9bd148 100644 --- a/README.md +++ b/README.md @@ -1,37 +1,3 @@ -# nodejs-form-data +Deprecated since Aug 2025 -#### 介绍 -A module to create readable "multipart/form-data" streams - -#### 软件架构 -软件架构说明 - - -#### 安装教程 - -1. xxxx -2. xxxx -3. xxxx - -#### 使用说明 - -1. xxxx -2. xxxx -3. xxxx - -#### 参与贡献 - -1. Fork 本仓库 -2. 新建 Feat_xxx 分支 -3. 提交代码 -4. 新建 Pull Request - - -#### 码云特技 - -1. 使用 Readme\_XXX.md 来支持不同的语言，例如 Readme\_en.md, Readme\_zh.md -2. 码云官方博客 [blog.gitee.com](https://blog.gitee.com) -3. 你可以 [https://gitee.com/explore](https://gitee.com/explore) 这个地址来了解码云上的优秀开源项目 -4. [GVP](https://gitee.com/gvp) 全称是码云最有价值开源项目，是码云综合评定出的优秀开源项目 -5. 码云官方提供的使用手册 [https://gitee.com/help](https://gitee.com/help) -6. 码云封面人物是一档用来展示码云会员风采的栏目 [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/) +- https://gitee.com/openeuler/release-management/pulls/2363 diff --git a/form-data-0.2.0.tar.gz b/form-data-0.2.0.tar.gz deleted file mode 100644 index bca0d044009f578375e8c2d87e631cc321f4cb73..0000000000000000000000000000000000000000 Binary files a/form-data-0.2.0.tar.gz and /dev/null differ diff --git a/nodejs-form-data.spec b/nodejs-form-data.spec deleted file mode 100644 index 6631fb5c1f288116c96cfe4ddebfc95445c9f237..0000000000000000000000000000000000000000 --- a/nodejs-form-data.spec +++ /dev/null @@ -1,54 +0,0 @@ -%{?nodejs_find_provides_and_requires} -%global enable_tests 0 -Name: nodejs-form-data -Version: 0.2.0 -Release: 2 -Summary: A module to create readable "multipart/form-data" streams -License: MIT -URL: https://github.com/form-data/form-data -Source0: https://github.com/form-data/form-data/archive/0.2/form-data-%{version}.tar.gz -Patch1: CVE-2025-7783-Fix-Switch-to-using-crypto-random-for-boundary-values.patch - - -BuildArch: noarch -ExclusiveArch: %{nodejs_arches} noarch -ExclusiveArch: %{ix86} x86_64 %{arm} noarch -BuildRequires: nodejs-packaging -BuildRequires: npm(async) npm(combined-stream) npm(mime-types) -%if 0%{?enable_tests} -BuildRequires: npm(fake) npm(far) npm(formidable) npm(request) -%endif -%description -A module to create readable "multipart/form-data" streams. Can be used to -submit forms and file uploads to other web applications. - -%prep -%setup -q -n form-data-0.2 -%patch -P1 -p1 -%nodejs_fixdep async "^1.5.0" -%nodejs_fixdep mime-types "^2.1.7" -%nodejs_fixdep combined-stream "^1.0.5" -%build - -%install -mkdir -p %{buildroot}%{nodejs_sitelib}/form-data -cp -pr package.json lib %{buildroot}%{nodejs_sitelib}/form-data - -%check -%nodejs_symlink_deps --check -%__nodejs -e "require('./')" -%if 0%{?enable_tests} -%__nodejs test/run.js -%endif - -%files -%doc Readme.md -%license License -%{nodejs_sitelib}/form-data - -%changelog -* Tue Aug 12 2025 jinshuaiyu - 0.2.0-2 -- fix CVE-2025-7783 - -* Thu Aug 20 2020 Anan Fu - 0.2.0-1 -- package init diff --git a/nodejs-form-data.yaml b/nodejs-form-data.yaml deleted file mode 100644 index 7a01bb895db1e325a2ba394ebe87649c93ff2b1f..0000000000000000000000000000000000000000 --- a/nodejs-form-data.yaml +++ /dev/null @@ -1,4 +0,0 @@ -version_control: github -src_repo: form-data/form-data -tag_prefix: "^v" -seperator: "."